How would you architect a secure and scalable key management system for encrypting sensitive user data at rest across multiple AWS regions for Twitch?
